knot-devel-3.0.4-bp153.1.48 >  A `I*!M@eeelHC?i|ɈNX G*b:ga՞t_ON>ր/6i#YƋPve/nA_ j ̿|(Vx Y5uG4ۄ޽J'a刘s+:iOaa] Zs;z3đh*_ jV=m4bΘX m j[zq]=VwW?~<2ǐMr_*eڂ ,k^u@taea5027177fb66c5c5e7ae31b70418fad432943cef488c42591fa6befdde7728aa316880a33a2aee040d3ad2077040d2ddd3223f7+\`I*!M@eeen+Yʿ3/pv um^S3`uFӖ~Ն!r˭(clUϹ (5J$Ћ~s*Ҝ{S ˸ U#y+k#XBƢхcA; E2a|Sq~ygw~BG*#DbujS+,h-\U`3Ci<ԇJ$kԴZnʾJZw#cUʮe_&]:Xp^ hKu:nj#, Èlœ 0>p>?d   G  )AGPNN $N N N N  NDNNPpN8(8,9,:"%,FuGuNHvNIx NXxpYx\xN]yN^| b~c~de!f$l&u<NvtwNxNy0 zXhlrCknot-devel3.0.4bp153.1.48Development files for the knot librariesKnot DNS is a high-performance authoritative DNS server implementation. Development files for knot.`I obs-arm-8SUSE Linux Enterprise 15 SP3openSUSEGPL-3.0+https://bugs.opensuse.orgDevelopment/Libraries/C and C++http://www.knot-dns.cz/linuxaarch64Er %~ QzR c ^ J 0&'K@ , tgj  GJ& r  >"" +:)AA큤A큤A큤A큤A큤A큤A큤A큤A큤`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I`I `I`I`I`I `I `I`I `I `I `I `I`I`I`I`I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I `I`I`I`I`I`I`I`I`I`I`I `I `I `I `I `I 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.so.8.0.0libknot.so.11.0.0libzscanner.so.3.0.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootknot-3.0.4-bp153.1.48.src.rpmknot-develknot-devel(aarch-64)pkgconfig(knotd)pkgconfig(libdnssec)pkgconfig(libknot)pkgconfig(libzscanner)@@ @    /usr/bin/pkg-configknotpkgconfig(gnutls)pkgconfig(libdnssec)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.43.33.0.43.0.4-14.6.0-14.0-15.2-14.14.1`_@____^@@^@@^@@^@]\HW@\3?@\*[@[@[ݍ[IZ@Z@ZWQYYYXWDB@W1@VwV@V@V@V@VTQ@VCU6@U6@U@U&iU&iTTq@T@T@Tk4Michal Hrusecky Michal Hrusecky pgajdos@suse.comMichal Hrusecky Marcus Rueckert Marcus Rueckert Michal Hrusecky Michal Hrusecky Michal Hrusecky Michal Hrusecky pgajdos@suse.comMarcus Rueckert Marcus Rueckert Petr Gajdos Marcus Rueckert Marcus Rueckert Marcus Rueckert mrueckert@suse.dekbabioch@suse.commrueckert@suse.dei@marguerite.sumrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.demrueckert@suse.detchvatal@suse.comondrej@sury.orgondrej@sury.orgpgajdos@suse.com- version update to 3.0.4, see: https://www.knot-dns.cz/2021-01-20-version-304.html- add incompatibility warning about 1.6.X version when updateing - rename back to knot- version update to 3.0.3- version update to 2.9.7, see: https://www.knot-dns.cz/2020-08-31-version-296.html https://www.knot-dns.cz/2020-10-09-version-297.html - obsolete only pre-2.0 version- remove rosedb conditional as lmdb is required in general now- replace conflicts with Provides/Obsoletes- fix dependency: python-Sphinx -> python3-Sphinx- use upstream example config file with correct syntax- version update to 2.9.5 - Bugfixes - Old ZSK can be withdrawn too early during a ZSK rollover if maximum zone TTL is computed automatically - Server responds SERVFAIL to ANY queries on empty non-terminal nodes - Improvements - Also module onlinesign returns minimized responses to ANY queries - Linking against libcap-ng can be disabled via a configure option- version update to 2.9.4 see NEWS- version update to 2.9.2 see NEWS- update to 2.7.6 - Improvements - Zone status also shows when the zone load is scheduled - Server workers status also shows background workers utilization - Default control timeout for knotc was increased to 10 seconds - Pkg-config files contain auxiliary variable with library filename - Bugfixes - Configuration commit or server reload can drop some pending zone events - Nonempty zone journal is created even though it's disabled [#635] - Zone is completely re-signed during empty dynamic update processing - Server can crash when storing a big zone difference to the journal - Failed to link on FreeBSD 12 with Clang- update to 2.7.5 - Features: - Keymgr supports NSEC3 salt handling - Improvements: - Zone history in journal is dropped apon AXFR-like zone update - Libdnssec is no longer linked against libm #628 - Libdnssec is explicitly linked against libpthread if PKCS #11 enabled #629 - Better support for libknot packaging in Python - Manually generated KSK is 'ready' by default - Kdig supports '+timeout' as an alias for '+time' - Kdig supports '+nocomments' option - Kdig no longer prints empty lines between retries - Kdig returns failure if operations not successfully resolved [#632] - Fixed repeating of the 'KSK submission, waiting for confirmation' log - Various improvements in documentation, Dockerfile, and tests - Bugfixes: - Knotc fails to unset huge configuration section - Kjournalprint sometimes fails to display zone journal content - Improper timing of ZSK removal during ZSK rollover - Missing UTC time zone indication in the 'iso' keymgr list output - A race condition in the online signing module- update to 2.7.4 Features: - -------- - Added SNI configuration for TLS in kdig (Thanks to Alexander Schultz) Improvements: - ------------ - Added warning log when DNSSEC events not successfully scheduled - New semantic check on timer values in keymgr - DS query no longer asks other addresses if got a negative answer - Reintroduced 'rollover' configuration option for CDS/CDNSKEY publication - Extended logging for zone loading - Various documentation improvements Bugfixes: - -------- - Failed to import module configuration #613 - Improper Cflags value in libknot.pc if built with embedded LMDB #615 - IXFR doesn't fall back to AXFR if malformed reply - DNSSEC events not correctly scheduled for empty zone updates - During algorithm rollover old keys get removed before DS TTL expires #617 - Maximum zone's RRSIG TTL not considered during algorithm rollover #620- seems we no longer need jansson- limit geoip support to opensuse- update to 2.7.3 - Features: - New queryacl module for query access control - Configurable answer rrset rotation #612 - Configurable NSEC bitmap in online signing - Improvements: - Better error logging for KASP DB operations #601 - Some documentation improvements - Bugfixes: - Keymgr "list" output doesn't show key size for ECDSA algorithms #602 - Failed to link statically with embedded LMDB - Configuration commit causes zone reload for all zones - The statistics module overlooks TSIG record in a request - Improper processing of an AXFR-style-IXFR response consisting of one-record messages - Race condition in online signing during key rollover #600 - Server can crash if geoip module is enabled in the geo mode - changes from 2.7.2 - Improvements: - Keymgr list command displays also key size - Kjournalprint displays total occupied size in the debug mode - Server doesn't stop if failed to load a shared module from the module directory - Libraries libcap-ng, pthread, and dl are linked selectively if needed - Bugfixes: - Sometimes incorrect result from dnssec_nsec_bitmap_contains (libdnssec) - Server can crash when loading zone file difference and zone-in-journal is set - Incorrect treatment of specific queries in the module RRL - Failed to link module Cookies as a shared library - changes from 2.7.1 - Improvements: - Added zone wire size information to zone loading log message - Added debug log message for each unsuccessful remote address operation - Various improvements for packaging - Bugfixes: - Incompatible handling of RRSIG TTL value when creating a DNS message - Incorrect RRSIG TTL value in zone differences and knotc zone operation outputs - Default configure prefix is ignored - changes from 2.7.0 - Features: - New DNS Cookies module and related '+cookie' kdig option - New module for response tailoring according to client's subnet or geographic location - General EDNS Client Subnet support in the server - OSS-Fuzz integration (Thanks to Jonathan Foote) - New '+ednsopt' kdig option (Thanks to Jan Včelák) - Online Signing support for automatic key rollover - Non-normal file (e.g. pipe) loading support in zscanner #542 - Automatic SOA serial incrementation if non-empty zone difference - New zone file load option for ignoring zone file's SOA serial - New build-time option for alternative malloc specification - Structured logging for DNSSEC key submission event - Empty QNAME support in kdig - Improvements: - Various library and server optimizations - Reduced memory consumption of outgoing IXFR processing - Linux capabilities use overhaul #546 (Thanks to Robert Edmonds) - Online Signing properly signs delegations and CNAME records - CDS/CDNSKEY rrset is signed with KSK instead of ZSK - DNSSEC-related records are ignored when loading zone difference with signing enabled - Minimum allowed RSA key length was increased to 1024 - Bugfixes: - Possible uninitialized address buffer use in zscanner - Possible index overflow during multiline record parsing in zscanner - kdig +tls sometimes consumes 100 % CPU #561 - Single-Type Signing doesn't work with single ZSK key #566 - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - Compatibility: - Removed obsolete RRL configuration - Removed obsolete module names 'mod-online-sign' and 'mod-synth-record' - Removed obsolete 'ixfr-from-differences' configuration option - Removed old journal migration - Removed module rosedb - changes from 2.6.9 - Improvements: - Added zone wire size to zone loading log message - Added debug log message for each unsuccessful remote address operation - Bugfixes: - Zone not flushed after re-signing during zone load #594 - Server crashes when committing empty zone transaction - Incoming IXFR with on-slave signing sometimes leads to memory corruption #595 - packaging changes: - enabled geoip module: new BR: pkgconfig(libmaxminddb) - enabled cookies module - enabled queryacl module- update to 2.6.8 - Features: - New 'import-pkcs11' command in keymgr - Improvements: - Unixtime serial policy mimics Bind – increment if lower #593 - Bugfixes: - Creeping memory consuption upon server reload #584 - Kdig incorrectly detects QNAME if 'notify' is a prefix - Server crashes when zone sign fails #587 - CSK->KZSK rollover retires CSK early #588 - Server crashes when zone expires during outgoing multi-message transfer - Kjournalprint doesn't convert zone name argument to lower-case - Cannot switch to a previously used ksk-shared dnssec policy [#589] - update to 2.6.7 - Features: - Added 'dateserial' (YYYYMMDDnn) serial policy configuration (Thanks to Wolfgang Jung) - Improvements: - Trailing data indication from the packet parser (libknot) - Better configuration check for a problematical option combination - Bugfixes: - Incomplete configuration option item name check - Possible buffer overflow in 'knot_dname_to_str' (libknot) - Module dnsproxy doesn't preserve letter case of QNAME - Module dnsproxy duplicates OPT and TSIG in the non-fallback mode- Update to 2.6.6 - Features: - New EDNS option counters in the statistics module - New '+orphan' filter for the 'zone-purge' operation - Improvements: - Reduced memory consuption of disabled statistics metrics - Some spelling fixes (Thanks to Daniel Kahn Gillmor) - Server no longer fails to start if MODULE_DIR doesn't exist - Configuration include doesn't fail if empty wildcard match - Added a configuration check for a problematical option combination - Bugfixes: - NSEC3 chain not re-created when SOA minimum TTL changed - Failed to start server if no template is configured - Possibly incorrect SOA serial upon changed zone reload with DNSSEC signing - Inaccurate outgoing zone transfer size in the log message - Invalid dname compression if empty question section - Missing EDNS in EMALF responses- update to 2.6.5 - Features: - New 'zone-notify' command in knotc - Kdig uses '@server' as a hostname for TLS authenticaion if '+tls-ca' is set - Improvements: - Better heap memory trimming for zone operations - Added proper polling for TLS operations in kdig - Configuration export uses stdout as a default output - Simplified detection of atomic operations - Added '--disable-modules' configure option - Small documentation updates - Bugfixes: - Zone retransfer doesn't work well if more masters configured - Kdig can leak or double free memory in corner cases - Inconsistent error outputs from dynamic configuration operations- update to 2.6.4 see /usr/share/doc/packages/knot2/NEWS- fix tmpfiles scriptlet- package /var/lib/knot - run tmpfiles scriptlet during install- update to 2.5.3 see /usr/share/doc/packages/knot2/NEWS - use libidn2 on TW and 42.3 - following modules stay static: - dnsproxy - onlinesign - moved modules to shared building: - dnstap - noudp - rosedb - rrl - stats - synthrecord - whoami- update to 2.4.1 see /usr/share/doc/packages/knot2/NEWS- update to 2.2.1 - Bugfixes: - Fix separate logging of server and zone events - Fix concurrent zone file flushing with many zones - Fix possible server crash with empty hostname on OpenWRT - Fix control timeout parsing in knotc - Fix "Environment maxreaders limit reached" error in knotc - Don't apply journal changes on modified zone file - Remove broken LTO option from configure script - Enable multiple zone names completion in interactive knotc - Set the TC flag in a response if a glue doesn't fit the response - Disallow server reload when there is an active configuration transaction - Improvements: - Distinguish unavailable zones from zones with zero serial in log messages - Log warning and error messages to standard error output in all utilities - Document tested PKCS #11 devices - Extended Python configuration interface- update to 2.2.0 - Bugfixes: - Fix build dependencies on FreeBSD - Fix query/response message type setting in dnstap module - Fix remote address retrieval from dnstap capture in kdig - Fix global modules execution for queries hitting existing zones - Fix execution of semantic checks after an IXFR transfer - Fix PKCS#11 support detection at build time - Fix kdig failure when the first AXFR message contains just the SOA record - Exclude non-authoritative types from NSEC/NSEC3 bitmap at a delegation - Mark PKCS#11 generated keys as sensitive (required by Luna SA) - Fix error when removing the only zone from the server - Don't abort knotc transaction when some check fails - Features: - URI and CAA resource record types support - RRL client address based white list - knotc interactive mode - Improvements: - Consistent IXFR error messages - Various fixes for better compatibility with PKCS#11 devices - Various keymgr user interface improvements - Better zone event scheduler performance with many zones - New server control interface - kdig uses local resolver if resolv.conf is empty - new BR libedit-devel for the interactive mode- update to 2.1.1 - Bugfixes: - DNSSEC: Allow import of duplicate private key into the KASP - DNSSEC: Avoid duplicate NSEC for Wildcard No Data answer - Fix server crash when an incomming transfer is in progress and reload is issued - Fix socket polling when configured with many interfaces and threads - Fix compilation against Nettle 3.2 - Improvements: - Select correct source address for UDP messages recieved on ANY address - Extend documentation of knotc commands - drop knot-2.1.0_pkcs11_check.patch- enable libcap-ng- fix configure check for pkcs11 support: adds knot-2.1.0_pkcs11_check.patch- fix soversions- update to 2.1.0 - Features: - Per-thread UDP socket binding using SO_REUSEPORT on Linux - Support for dynamic configuration database - DNSSEC: Support for cryptographic tokens via PKCS #11 interface - DNSSEC: Experimental support for online signing - Improvements: - Support for zone file name patterns - Configurable location of zone timer database - Non-blocking network operations and better timeout handling - Caching of Critical configuration values for better performance - Logging of ACL failures - RRL: Add rate-limit-slip zero support to drop all responses - RRL: Document behavior for different rate-limit-slip options - kdig: Warning instead of error on TSIG validation failure - Cleanup of support libraries interfaces (libknot, libzscanner, libdnssec) - Remove possibly insecure server control over a network socket - Remove implementation limit for the number of network interfaces - Bugfixes: - synth-record module: Fix application of default configuration options - TSIG: Allow compressed TSIG name when forwarding DDNS updates - Schedule zone bootstrap after slave zone fails to load from disk - avoid activating the intree copy of lmdb- update to 2.0.2 - Out-of-bound read in packet parser for malformed NAPTR records (LibFuzzer)- split out shared libraries, knot-resolver uses some of them and atm we are forced to install the whole knot2 package.- lmdb seems no longer optional- create a new branch for knot 2.x starting with 2.0.1 - Bugfixes: - Do not reload expired zones on 'knotc reload' and server startup - Fix rare race-condition in event scheduling causing delayed event execution - Fix skipping of non-authoritative nodes in NSEC proofs - Fix TC flag setting in RRL slipped answers - Disable domain name compression for root label - Log via journald only when running under systemd - Fix CNAME following when quering for NSEC RR type - Fix refreshing of DNSSEC signatures for zone keys - Fix binding an unavailable IPv6 address on Linux (IP_FREEBIND) - Fix infinite loop in knotc zonestatus and memstats - Fix memory leak in configuration on server shutdown - Fix broken dnsproxy module - Fix DNSSEC KASP timestamps parsing in strict POSIX environment - fix multi value parsing on big-endian - Adapt to Nettle 3 API break causing base64 decoding failures on big-endian - Features: - Add 'keymgr zone key ds' to show key's DS record - Add 'keymgr tsig generate' to generate TSIG keys - Add query module scoping to process either all queries or zone queries only - Add support for file name globbing in config file includes - Add 'request-edns-option' config option to add custom EDNS0 option into server initiated queries - Improvements: - Send minimal responses (remove NS from Authority section for NOERROR) - Update persistent timers only on shutdown for better performance - Allow change of RR TTL over DDNS - Documentation fixes, updates, and improvements in formatting - Install yparser and zscanner header files - Improve lookup of libsystemd build dependencies - Fix compilation warnings in endian conversion functions on OpenBSD - changes in knot 2.0.0 - Bugfixes: - Fix lost NOTIFY message if received during zone transfer - Disable fast zone parser when compiled in Clang (workaround for Clang bug) - kdig: Record correct dnstap SocketProtocol when retrying over TCP - kdig: Hide TSIG section with +noall - Do not set AA flag for AXFR/IXFR queries - Features: - DNSSEC: separate library, switch to GnuTLS, new utilities - DNSSEC: basic KASP support (generate initial keys, ZSK rollover) - Configuration: New text format in YAML, binary store in LMDB - Zone parser: Split long TXT/SPF strings into multiple strings - kdig: Add generic dump style option (+generic) - Try all master servers in multi-master environment - Improved remotes and ACLs (multiple addresses, multiple keys) - Basic support for zone file patterns (%s to substitute zone name) - Disable zone file synchronization by setting 'zonefile_sync' to '-1' - knsupdate: Add input prompt in interactive mode and 'quit' command - knsupdate: Allow TSIG algorithm specification in interactive prompt - Improvements: - Zone dump: Do not write class for SOA record (unified with other RR types) - Zone dump: Do not write master server address into the zone file - Documentation: Manual pages are included in HTML and PDF - drop patches which are included upstream: 0001-loosen-openssl-dependency.patch 0002-make-configure.ac-compatible-with-old-tools.patch - also drop all buildrequires just needed for autoreconf - new buildrequires: pkgconfig(gnutls) >= 3 pkgconfig(nettle) pkgconfig(jansson) - create devel subpackage - enable rosedb and bash completion- local state dir should be just /var- enable dnstap support for factory and newer: - new BR: protobuf-c and libfstrm-devel - prepared lto support but not enabled yet, still need to find out which distros support it- update to 1.6.3 - Performance drop for NSEC-signed zones - Proper handling of TCP short-writes - Out-of-bound read in zone parser for long domain names in origin (AFL fuzzer) - Out-of-bound read in packet parser for TSIG RR without RDATA (AFL fuzzer) - Out-of-bound read in packet parser for malformed NAPTR RR (AFL fuzzer) - CDS and CDNSKEY support in zone parser - Add defaults for TCP config options into documentation - Detailed error message if zone reload fails - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch- update to 1.6.2 - Limiting number of parallel TCP clients (max-tcp-clients config option) - Ignore refresh and transfer events on non-slave zones - Compilation with Dnstap support on FreeBSD - Possible file descriptor leak when terminating inactive TCP clients - refreshed patches to apply cleanly again: 0002-make-configure.ac-compatible-with-old-tools.patch - moved autoreconf -fi to %build so it wont be tried in quilt setup or similar tools - move up the %if case for systemd in for the preun scriptlet to avoid warning about empty scripts on non systemd distributions. - used xz tarball: new buildrequires xz- Add deps on the docu packages to regen documentation - Enable systemd integration fully - Add dep on libidn - Cleanup with spec-cleaner- Only require lmdb-devel on (Open)SUSE 13.2 and higher- Updated to 1.6.1 Bugfixes: - Journal file would sometimes outgrow its set limit - Fixed incompatibility with OpenSSL 0.9.8 - Proper handling when machine hostname cannot be retreived Features: - Support for DNSSEC Single Type Signing Scheme - Compile with lmdb-devel to add support for persistent timers- Updated to 1.6.0 Bugfixes: - Fix zone expiration when AXFR/IXFR is being refused by master - Fix forced zone refresh on slave (knotc refresh -f) - Persistent timers database opening after privileges has been dropped - DNSSEC: RFC compliant processing of letter case in RDATA domain names - EDNS: Return minimal error response for queries with unsupported version - EDNS: Fix interpretation of Extended RCODE Improvements: - Maximal size of persistent timers database increased from 10 MB to 100 MB - Added logging of persistent timers database errors Features: - Persistent timers for slave zones (expire, refresh, and flush)obs-arm-8 1621379340  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMN3.0.4-bp153.1.483.0.4-bp153.1.483.0.43.0.43.0.43.0.4  knotknotmodule.hlibdnssecbinary.hcrypto.hdnssec.herror.hkey.hkeyid.hkeystore.hkeytag.hnsec.hpem.hrandom.hsign.htsig.hversion.hlibknotattribute.hcodes.hconsts.hcontrolcontrol.hcookies.hdbdb.hdb_lmdb.hdb_trie.hdescriptor.hdname.hendian.herrcode.herror.hlibknot.hlookup.hmm_ctx.hpacketcompr.hpkt.hrrset-wire.hwire.hrdata.hrdataset.hrrset-dump.hrrset.hrrtypednskey.hds.hnaptr.hnsec.hnsec3.hnsec3param.hopt.hrdname.hrrsig.hsoa.htsig.htsig-op.htsig.hversion.hwire.hyparseryparser.hypformat.hypschema.hyptrafo.hlibzscannererror.hscanner.hversion.hlibdnssec.solibknot.solibzscanner.soknotd.pclibdnssec.pclibknot.pclibzscanner.pc/usr/include//usr/include/knot//usr/include/knot/knot//usr/include/knot/libdnssec//usr/include/knot/libknot//usr/include/knot/libknot/control//usr/include/knot/libknot/db//usr/include/knot/libknot/packet//usr/include/knot/libknot/rrtype//usr/include/knot/libknot/yparser//usr/include/knot/libzscanner//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protectionobs://build.opensuse.org/openSUSE:Backports:SLE-15-SP3/standard/884836b1a4afb40fb5c10fb259e90026-knotcpioxz5aarch64-suse-linuxdirectoryC source, ASCII textAlgol 68 source, ASCII textpkgconfig filePRPRRPRRPR[$Ŭ+]#)L-{LγiG o8fCݒ&K.?LIx~{рi?Wb  Qlqv=Ȣ%eX%$?X%k}+J&H6Ÿ<^%_ 5.ЈDYaI3"TK1%*+} mTUDl6%ʏV29S$nD|~D ʦm" xi_ҥ-+[9MD-WeRMu:PM_e-z*AJUh G6MR8\3m͑E_\4@:,_ko2OyNnጙqÊG*w7-\Ή:wTDH4ӌ2d…{ivl^#%dw7mw*9nn'iF]B4]UFFMd3>Topx 4_N9 ||x ܊R\&v,rbN%\1WT/LnQ_ &{% FREΕ JGeskM `r!mr먉%C ^>Xt…ɿTXr.*oOj}Ͻ~i,dK5?C4&#}`)$}.uSB7X}r3&[v |Knq]:#SV{b^ vϿlܠnĮE?1 Sb6_2 ,7 jof0W Q>:nmF}nXX]wZL b]0fDt O\_䓰f;8€kB5tvo\JfZʇ֟.#@E]foƙ.ql*ʂl6D#"ix$t|n0k:; RT]\ZyNm^*;b%s]{5:U4ndy-1MUR\?-ǩ}7 3IE^8pܯGs:3ڣ@),CpFcZ"!?Ғ?O-.+P|o+9z`r*-@dSْ+zcj|n|pfOE"Uޱ%׆r;CX$!V,1Y].hPoHj|t ,;sG(~.䈓d,o X<='Ӥ 斟a>K*ƜQo>>/ҸvO ^s@$n.0 ~VBCk oM5ÊW7`8#`D%0 1z?+nsy(d32 /mVڗ5Ճ}@U%ȩ? waǦJ dtF]{=QP-goim&JzKUpebk2}hHX&5[65 W O0ߑ0~&KGZwbevC1G9fl]"qv}5ポGUvpɢߥ4pxl~aTӡ'jL@wr'5e u^l-;.H޳+JpU,p&9-"+_1/|Ǒ jIըg r!ur`.>ea[#.w~RY@,qQ;=AM~_9TR h#D&\Vza~P]dĿ-\(zm_ V0 4<>m=4smNOc w:x7ڻOWFmm3ΊU6=CYO&s5xEBuC_fӢtL߸Gt"n(Wbk7z5D!Z) ;Gd N[ƢT4c_ U8znA|)~|>?o\G$:,cq0VyEc]DYF:7<ƴ3h]@*Qg#ſP"GK@IG.2{Q.X9 P_|7Ee`cĩ}vVA'~"W Ǫ<?YQA: 5<ԀnjZ9%/92g /A|>zʞ h+;1=9&J=G{<6v|PU[sB%66 2[Add ~?sb_JkTQKث)WzȑPD$? 'Qŋ[Gn'WS˝duM/qV' &1 c M嘦IW<J6Aw:JG5ZP{G#5d{v@#QN{ޚk.>~vNUn Bw*n>ڭCR #ϭ,FDL`BQf PRI*Nj~hBjܸ^7TxZ~rKHόwWwqwE1MKRL7~R3\Ic=>AcD^w_?>c&3=J%(S7o5uZfPJ<ߋ3lo%Z@;;mR C mdA% )CrYnwJf5~8+uY4jч4+!?̪[4q%{*dW,Ōa6ڇc8u( Lo՘ v;k+R `mU5ovmZH^Џ Ե ~̿fdxH)yʶ Y!hF '*a "ݭY86QʇU]HOӴbm^A ~2NTHN][c쨥=帓_}z*4UXl)]-l04o_ӕ-SPQlv+_!xؗP@o&u-w+>3Vq:bw~#뭞n A`x6k( P;D)Q =r~Һ$9t|x(LYGrK"{4FO$BA,oN~]'AYJֲ\KA3<`j-74D E)}(xOly靺R$V)ENu{B埥&^Zv"))+z.i\n'/h )ƒYdhƦq# }DJ#P~k +(eˆATfNt;u_s ~A[ΰ,D[uJb, FiVN֓2q.?#7 4N0"h6x+KBSM;b= ZXDtآA%g2y&%T;mF=$$&EJЀkS[!+P10Y`ee 7p#D=?f5rsGp~[+›xTZc@pַ~{Tz8g`P*Ў&>3M2I*Xxy$W=y 9=/˜cUn,|}G䋳rsqww~+#5!-F2wOWŷ18![U˕ νG.ݿɧ=Y*=mN]ubq%#A?*Q#9U"ee $RGth-.{OX͊pc`uW^zƈ=Brl#8}]|88$:F ϑC?WzCcMe&E}E[kr p]kb}QcrO 60xUy|Zvq\Xs bϲ@֣:@| XuܖbaSN~?O" tOJ@ )&,{̈́9mlR4}0p m0gy6{;9()/k=*/b >S9f/-c0jl#lK,ƅ2EQ3Iw0TSifٲl'I_r`j}S7$jF6)Q'~Ǘ^L4tթKb|1cD2E:5j (2~OskWp2߁\/[('/S\%8rnSe螔L;P-]\^WSj_CU@LN܍@ {`Υѩ_3կɓņ0}-\hf Q/ę*C٤ 6^q7/ P.݌z>zp &(Õba*,+I`0u';& C^C!C_\UzG) i unŋ14=Tܼ{PS6sґOĘǁ>-VO{Q?iBтWf-֣lle)ɨ*A5WbDO o^;17GL_mP*CN,OVY(cc|f` ٱ|o> XMOgo=§6Cuay=&HsWk=<"՘Èx؟|ݢiҲ[;S zmk+E9nʾ$\4HBҏ8otjh>.L19TUP6雃i5xNLeW#j.:h|bH%19rN)0["Ukb`IE&23cG$D}"ҚZa_9S f>& @"ת4əV6*os^XZ?ۘsw.x$ b u9C2kdJv&Ud{DyT\.}uu_1"CZrm2p Y}W?IzkNNP_CSL6J5,N&4y>:N8Zw|c|Hݹݞ Bwp^ P@,o|+l' 9jyXGi)~.^a9U /;.\DYFs*W-\t` kҰvz']!L4U&귡3r#PmIT1 iyەr )SlG[ZA"0 O'Xo;a_P;LYmԪ~?͙lfX\k7"F}TOWt9B8,%͝Ϳ&D/#>nx"\Zx%!Z蒸k8ȖUkgW$㒃yc'7bIHHP+5$2ܞs\7ih7पnbXXl_̋1709\(&)? ƀ[V@xrs6~thPF;"o*O>pWҙW_X{yqe}=ѿM-U PؗTӁFN #m*rNiAm2# Ce.}ݽڏ_J_gK8[H] de+S,pw)gRѧbKmV춰rfQv0;}1qt!z/D@B2X/}Ńە߷"gJy@'o+drjkjp IM [7O&ڏO%MBSY2Xo)y2}oPA)tfFbKDI֮5RoMy~4'xmo#IrrZ^ibELizQbn٭+ '$/CJ._Jg`_8^]l)۱&)5lYDxxՀvs|P ˓IZ\ge{~8LP`e|Rg@K(7\׏~aol+m#+ct"U@2 bdg9hdkDJbr:Q"DwqbO|ks|OԧQ8Ssd@UE%^//wtL- $tl1_lmd#e^m&1نN@2 F\r 6` w:nƛ/اj=Jea"%*MKXB2JU0YqyeJc=I:& lf!W0! :2vBAS!SWԾH"'8}yT[o!+{Vfؓ>u*lVB?HnMMB!!}6 U\" ^;j M1E^]=8p5 #!vz-ba GXQfCA\ jhKrSpϻj4X[r_YR,)f-Wvж+Bр>t8|D J LDYeW1:^~RV覺tBOC"_dc"Z !@v;و65i%\q۰WMWlBc;p>"j) l#fA/bWHKڜ۱ƸQVO| Chq>>QD3k2e9`V]F lr2֑ek*"B T`X+Λ?qע{d2⩽]/M._M h'6sҴO+a쬻˝M;D0=r#F~WБs6x_tK܃ahM- ~v%~\-FPQ"9՛/xq|8;z 026WJrC5{Zh6NI1ܢyxm,Z/\> wЕj]il~"@>Ui&c1BiJ!UvQRWɮCSst@*G hLsUSzK )l܌_;KsV~mZQ>Gڬ@S YJBC*G4:91Vyqqܫ+2FRw qX)3pva>,^%m`܉` =2*#AĂ&ػ x.0op0*y_h9oZyq,SMH noQ\G0͒^ϡ1Fj؏2K]G~ƢRx2n+TB?Pe[z՞~4>^(n@ FN'w=h2ϡn7`$>WtӿL繚qEe4]] y aնtȩ|<(F*hHۆI=8q5_[3U}ss|r^%3 J\o1PYpG3Bfz<\7,Jܿ)m޵wyK)~.(g00?"`/#v.r4eSŃqfן*lV=}M(D,(BzQ,D_ &ǯbOb^K;\d,@F;[9+_@m*zYErwۧLiA`rC3ew2{v\?Gӛ|aztȄ_Ole(~)G)3&//r#.XxlxcBʋÑ%8Okc@"MXb4' Z=,)tix2Y1L!D]%a[{1CƃTK%@ƦLdl6U7#R6=C3!+SߘsSx]^OVW"U 2s[H{fuˆ`nP=v˼P3ƪ *9*a/y Z}ɬ:xuU@!{aO_MbȆa=iD#`I#Vdq)֩Y]]勔I~x?=F\CϐFD <ЇSi{Q"eFn.ڴ0f#|+Ŵ9­SBY]5LMLceTJ - Ya{&Pk&Ekm=} AiL[#%VdT8HTxmaeЧc/'fX)X!.2?}0,mݥgj~K>^sRJL6$B.BizVRb9pဒz|WG&<mu4E$|Ҷ%|@vlxفoNY" !Wf)O/V#c@L* `1$Wxעv ]=y<"'TU7FB㦎gi2g_?ַ8 \s&b9}b)C&cx}Vzoe60M6 zaޅ Ƅa&٠iWFqi7WN֕s΅'_iVX$j؞g'޹M; OD3؛,QdJ]g{re멸03$| [b|YẋUOBKRyBḭ( k FYC~jROc.UX75}lj/ Seb\cJ'53߻-G?"]Zzzb`ܻoUV֌*J50i83l $Ua=TE=0pCx0/]`` 5xXMQL״)u%Uk@V|E"NU^rW^7xOCs,\ch a!uNѻGW+Cԑ}e_ tOaͬ'1)p k]$=Lͷ-&{yAE*߀rV` 'aJѷ.л4'޷8ZY!v98;)h- K%yH Jk! n+фPyXG5t f*9>jtg\4kBՓK$zJ#->C"c Ed'Te\YϺ4ȍ4Ey䬈S>LhzI=* 0~vM;G ϖrō{l 3~QJze__B kQoD4 :L6Fnҿب^s W/!$:kcd\7_2ֈsY-$5e³, {j 3uv4P}+ij( #8үƄPl.~l&MXya`~xml⃋ɐ굟kx80|789j >{{q-[yU.w3͡;aӌ/:q)y6u^7[dYw>$1"orTQ]񜙵p{@+dC$LcsDxz1T2~-8Ċ>|Z#\cq5OS;XI3ގ#Γ z*DY\)Ah]\q|VUA jc~T(+lfnd[lD~LVYCǎC\#oq=:5r3N)@ jX%RJ anKX:Џn cx* Kp}STD?y&w@q+؋sC+SXz)e;d?iEcei@qJ0fq?LIJDoVx np9 :e\_nL+U#]HQ2/~5P 8B5&ۦSY2SȷCL\YE:wX\ ٜo4+5Ny2"#s҆T_GRfr޶G&#}݂*>GF&*]ı2C9LU(Ixƙ)WSCfcW( dU s'5sdk?Fk,.]Y8 *_l 7PRWDHTmΈ |*? Ts1b.\雡}MA(Nb = >$z׼f81eI/4ZMk~͋D^a^2Ԁ(ɸPpA4Q0޶Nʲ!! 6~s/?lxtSF-eI?]N]+8b)pm-às˼bn拃;oPnNx' _\yb!CUBK'_D5`FWeXd Wv,P"bq !|X휨蟂T#a_hzhk9qm)1.Sԃ .#"qe78G >i`@Wmc]_o S#J9/oN,|)jޚya@YhӌXZ*9|ّZ;7/5rpoOlϐoӟhLD<*=PJkT5Ldm| \[" 5 0("k2EGu!z /BtB#F(5(e[=Re!ԶQu!݃Hi<~m^dFUfȫDv t̮RM"tuk&uweK;ih#""EgZZHiw@2ryG~yOΥ0uTuRV$%})cj GΫESG(<ҝ- ;يłU["a\d_1&Q:A j(N?+zDUqhF$V1}c@L_2fxk$?}|9 oq>@5Ɗ^SdIQc ?-e}~8bwH-szsguN_N~ Trc-&!SZ؆cr4u ?Y%Y7 8-hX@Akۅ4}KM5bto/1Z^*!ran_f&Ojj& ]v T-mi5X".JnGl$ŕ;̫]/ښ6ZW@|OfСK$8ͯ_E_/D!HУT*=1@NKa 0I gܲu=7B. .ժGEq)±dyVH088Qdkx=+ ž{ (B<(1D6 P!+A]zx-X5ؙ};gvdf%F/#ẒA=%sϋ8%DX+C;4+eiq/ nUH#8qW6:1ķY1P [eʝW:|cͱ1`\= T!P:1Zy$܃7`)̫<6ycEՅkpP=ޭ(l{zr-L]h@ 1WC&T_TCn{Us.SV+Xb0A/eڵJuܐu1 Lgx'ί~`}>7n,`jm![)l͡p92ajJĵ=L #f)@:_Pz2WOǗ椥s3Z0^U5a|$eY*21(=+RT zf>9oҖ0WSmczǫO5 &Dc6{W|^_{Z3f29pghxox~t+Ft wZYҐ٫{F r@Z\2l>վg=PUʋõcE=y*\tN,` o!raJ|Ҟ`9n$ғ @,"q"s*z'Ɠ$3='%OL!kX3rDPEJ 6#b,Jx':C3XY?:> bΙ1&0VhyJXEF!ͰᤆGa|"a^@ι7\E>)e oa{I:4{] ˶O=%bD%$ 5z !wkqBjp fZ)5$GmhUJ݇l{16Љa[]qp©'X,lˈ [ %,A3@X#fM3EGP*{HFUweX@d/NinA¢a|3KBV)z9>D݇(O̫E{=21mk?2[nqBG[@X*y+\]_'um_8؛p#oGc4{bї+Ek9^<ѽԱY!TTX>򾓡b{͆_( 'q]%{v7eTUdQ-x "B;mjDcn[XcO^<}ql^\IӜEqNۄ6Dn8'f.ld,X 8F7nui@pc+2{/+[qU' ]x!qZ~Q܍3*so ;{KzYԯ{VJ֐udM $d< qD[Oaĝŕ'?v]3vtU+4炏/DbZתu,80 8Qݨ'fTc' }làrca`(njv*GߣQkXK%- @hw!%e,mg05ld|̚K3AJDF/%WLI|{_iƴNF N|iwN1x1' Ӯ< N}~9] 8jpD&Hx\?Won(.t*Yp3rq1¤=q" uH{.YyQRvyZ%h<;/-r~  X-UF i8QKwap/44?ݩbheڕ栆-cqS]a߫8a-ZI![~BgtzNC Qcl[>mg[{|-8fy5-)#rG_S.=:" ΪL L$lZ4ngGF0C޿ufvp[^ܷC;1X{g7/h'[k2*&=i4>xFP]N~ T.GPe}&Xv2a٦)LNqj{G(glj/g=v'Nw2MZ>^Zb{¦ $z)Q5O,?Xm?0Ϋ3^5hP)<-) ѫ)s*S<3#e٤_6Ɋ<^1%%g(Uz#5;$\!6MxF: 5=@% `wiae>⑈9dvbHTAOYz `<a#XZ;x5c84(7$~V/L5ItG+84fzV_f#{/U5Jv{&d- +S^ ̦,Hz;N]n-=-[âB]P^{SW6iCXB /̪)JibQaNJҷbS, Ҿ鍧>6q_$7Au>K;:l;v WY92IXu]4$RÄnP2 edIzB6IFv F(9N0(bVqmc48jb1b>ՑTN3P>b+2do&~p.6O1Lb"'~7l[)&c?  uKk81.q-KzϽbA>G%ji4E;!rgdM)&s++5YWz,ؿF`淵WigF 7TP|yD\/<ה>U{R f=ܩ ֣ |&4dʷ U漐pKn2lEqGNCbFoZ$R%h¬_VJ-a+)z::naMWÃqXFֻwSivsz/˒wgn^B-ay,)caG =V#@Vzǰӏi P2B[ƭhT1bvXي?(n%Ÿ>@?PX(K?U"@V IsʌruRNz;b$)֢a)xEmuПe쐜0m[[<#qn ? ,@pw)""}a'E-.E6[b1fÂٳw\)ˍ3f\ue@pLc/Z`GpE3\ۨ9E"7Ll=g z}d'qCAn8ݗ8P\%M`ԢqU-A&Il.H,BˈpҐtFpQL=Q#B5Pƍ0 } \J( Bbr?NfWrj"8tlƆ1-I3 Dv&M9qԬZE`.ڒg# Kw1 'w@_ċuevB̺{V7W$ӎu  h_qkxNjԞɽ/ƹ}.\ ^5F7K.cra$.'Y[橘!f5q)=D +Ye,sِ!zqsl>a;gb:S\qL 瓱V\S3dX z_kyʎNzKSj;|?xȦziz姭Y6@}|djo"b\*Г:O~ t׋QEb;Q6/‡cdPbN9N nrȜL`țJ44<><Hd]9cPu11{_uYUL]r8BsgZa\i8f*\яCBJ OgUtpP1x2B_ٽDyëWP+:bpgR9ѤdQXpan%TӞ(x3ezhq ?`d,RU.hV6iH[VSRLcRn+=Ӯ]މ:-ep,I$L$ݽBԤ32/n0=H0H[JYN'v1+KjɸM@򅟟."O=crlͬ$Okfm/0=ՙk+}a%q%XH g4K?KQ[lj_xu4|š @*%K+No42 3AM2ح *0'G4=˂?L,Drn&I<+?.V\rXʰˬ'os{G|q;?X ;sJv$Slg#P'Ϭݮ\ C\A:2A8bMJҜ V}wft jDy@,zǞ`yE%?ovi7e҇ L~}4 z4 Mf%̸҃ j%;)>O&_`1'0}6 ,vL'np C7wjI"A4F. J(~#/(3.92X`!_!72wsB؇^bf71{d6 w0V9 2?͉+<ˏGgMpG vyתkKlh&Q I6N1BE)3=eؐyk.8p_f8ޤgk0m< 9Đp%ǵ/OU&(]b+Q5u%TQ"d^*:ĂQ ~94bx cPqo)z;6 oS]vǁioHFvv3/l*a|-~!"N4 2@fX[929*['qmp@M=DP˷u[*CvXP\IV{B{&DnM~w[ݸ֞kBhSkJ,uw+'.?Ci=+7)Chg=R>CQ){ߡl.j^W3OgW Idyϟ[HG¯Dn1mN oDȌ }r:fld&lÙ'E[ϢU<%1yK9r4dO Zd{3Nu ?^ًgwvι̪Ӑka6粔,l(Q g>eD?MxxTa$m9vVZ rKO;hK'!:fAz4+3_ۜV4>,P8+$f+PFo&/%6~q|#AGS."uI% DKgTk}iD dr@p3e|I M>rRWR3nဋ цc]gW f_ |-wE^Lb 3d*N6W_˼㇗IDqXOt0҄rgu H `1SA@- M3r媋fH2 ظ7ܿ4Z:Ш+_CNwuG|Htwiܶ/n\)'k+D ̵;8]~Zbu.E5wςXN 52} OrR5|#O[<(1 87\l~:4AEA^|F9ZQpXۺYqc2H|1lIJeXPmo8JOjP܃+:&rU=zs@ƶ3*)8hR(_S^,\Ce}xXd% k㛄U.-G>{o5D0)*'<o֙4Y+Ku@ۭ>Yɏvoy w0IT/k8M~|O0Uu#>:n mH}ˍw t^Wtm[85 \ / x; wJ<_o :UN[6RrϥQrOzpFGBA˗薊3VtǶEWRD]KYG=-? ҧ{d}+0= #m\m4oo2:Í1GNo5'Ĉ`z,Sn`1P;/dS =N#6QEKSD A4,AP'~]X~zO-N@Ѐs,VaBȯsCiK蕼) q[+f@[7;Q}>400̉@;c,\!PRFzeb]밐F5)/p\/2CkJK0P*gcS9"t-#7qzSCxVw!a{'ݯš"4+~nu2R.t9mY (US_&>YT߇=xJS?"=v6ᩔGk M켴5י⑪]Ç:a#؉DB.};V/vH)Vrn{1H&N%Sy7~H:,Ku1"Њ  aahSv)4)=OaeRQ_*),hgk=?7{k-< =i z2ٙ(f>3/ suV+ U_2^K^wğݦsJ am߯K7gC9 {uE|SބW BoC\RW:EJM~ċ),JR朰п-do_P| 9 {t}\.^}Ksg$tEEM^#EI5'VN5yԗɓkA3"\x3zhY` Z*uՉVA7WtI% l8d\#ੋd(]]S?PZiқ`xHk434SZ?HI/ـliԏ[92Q[}7 bT/o6mɭ7}K)c;, 4u'*/ð9b8; _cPuuix}:Kj%UE}Ak[",])C.5C,/QB3(=I q*m=WON6ﭓxi]ǭ]%;tBw_zd7}k$:!ۜVO&!& - i~9[!_ 'P*YP'+zR}PV#\AWAy u0u桳nj^PlVt48&˴+}.N0 ±87x`Ày7#PߧFRuIK>0L4E(zf'2\)ԃ˙JJ3/\m^ E Q !`Nw,_n$ EF;xB2O`ɵhkEڵ.xXWI/A$^oTs\hՂJq4[6U "ߋJֶ~~$wt56Aѫni,O<℄Ɗ7=? \8p_+s?s&>, ֚՗ZU0db> .HHTr+_t5laAW;H\a6&;餎OI,MY!F 52JYځ:Kpx%: ٛ7Z풊5.paZfJĜp|s:LbGBIc2͔ѓqU~ =`[‰ vuT|=c(IXNVՊ`$@9mS7ل*yg JNiˆD/ (Fɹ( \ec-rPD>?cn; y^݁d(lr`H)}vqVt3QUb/cڪ,&4Q@:Aou|?Bf |mN @utY0Y]ZU>9Fj*mi&FaAY0;#1adLOV7FH/gOK1 S7D}WR,DȱyY%ge?r#\SܥRcAheEṲǠk(5{+o,?ԨwYr)iK嶹RKzȀye)NE> ޮbp`ݷ)>`ل̝?2;j{]nމLj,3go2'gܗkx[q*\"Pr \eZԋ>ZY&6"} ?9 D, 7RLb ˜`C R*Sdzq&F5+ xNJVFYc?*18,un16x 4J#/վ8eH48h &~ IlIG5-:qU mc7]W{D5=.jBe--;Ĕ6h$K"pf /{WPBH[|Y:3 R3aҖ[MQFEGDlX Vbඪ>#{+1'H΁9ݺ_)?f1C+h#ֺ48F?猴,wy3>,6wZ9kRNծ@kG?6R0;+r6Ks.:1+PQcz_Ј/_խÁ(`W6JTHScD*̿ }7)]؁E/vHqcGCQyTlۙӼpw`&~!W1b/3,{)x9-8MbÚv./嚂z X/l#"8=>:=GO jD OqW}&SS92@- Ϫf) n!҂0uZ^;nx~29 QdKn XYu^PR+n"Bds:eߦN-]#@lGrxA6yΛ]/'U]ȗҽԳÞav܄@؟<-1yR)$I:cmby"DCUStTX@^n%g_.hWl#VB@t m>4U;vr\{o9VZ%>jF'*/}-@O*`}V_"r=V%qR¿ZʴFZ`.KkC11LEvӾjJj*.(,2͒8=E,vyyvސ緋=DgxuzcƯT5Zv;``}*uTު85jyf½N=ȣrHG-y`#اUcS߷/z1ִ29Q/8.Ge `4^ܽ;EE3Av_vXN59/lV_~!Lv+q)~:j;E=ZΚ4)čL+;l[[刐\gEv]LhK}_VhjiJ$MR'Rk݊aE2w !WSE ;93_4BSXV̭zHp2عOuMj6F"yR/x*5\jRD\b*:/ d^T)`C|TH2,,;$۩}JcJwg*wpJu<]pz{xβP(Ir&oO)Ԇ߰ym9iX^>9>b홹fll0*$.56Z)Ð}boBėq٭kGwϟ,iɞ6u8uQ^ J`rMDA!K~ e6V^< N%9zgj@d !gٖVϣ:q~TF7fkWa|VDzW}5yC^oqɭ*̙ɻoVxole\,qFEKR F*HVGWhU5"DH3bϯZY1 r\a?:#ւRyz9NU7)? :%`v91'Bg.\R|2J5q6 bХe(5t]ΙӸ+$ر~ⱄݓE/ Gҟṱz2cb'+Ƞrm&*p ;< Y› i:̙ZяIG z';U_M7 Lei)񟇬'X?X t؁O@-61{o}xLxDЉ]fPxC!8mQ4v҆J2ܘr(þЋ mQ7J$sdj6.&<pyZx|9kPLYǜsuoaKЏ#Y8X`)V3T Kޜc;H*MmPp4eJaңia9y4)ʴpR*5R?kSէhc"7S@ B Hɡm [.y ̲`gӾbIMinix!&'Nu\iHYLb2șP@Dpk3VhNQH,C[`:e48wޝh=&V"EB϶kӑX_4<^\, 1<3գ6c%K^~Cs{VH#JW*Dearc[!TsuLaJP"YkgݕJ0Q[ 3 j[ Ͼ_ lS. c1w8NS)𽤄 hK21b>;f2v[h׭{Oz,0v5Jfe0!O⍬`Pl*s[뢜fz : hHqy;ΚEY%!EW<]YǏ*k3"D; Bk2p_]7k~^ $ $qOJfBf>$I^9[>Ô6h R-,VQ1l:X6.{{Z2Mgɒk@s}@x~idTo;|F`AEP}eM_{mSA5j(7!+pp8Z3GNeX7Z!p>?WYI%f`>0}oG}:|t;H̷^C}[_g_*YK c1g|/Xh6$Vb4 R}[f2<4Ǎ}횲FTդi>x8JICouƥ%QhsJKw\E^+6jy/'dȲk;zg0d8¡)w9}=Ff? M<Ľ݁eż̞;XSaCi dwle s[UtM87=pP# e[廊4ӊ'wDGrBv(0/ilahq`4e3[ n"Sj:wDOW2%*e9m 76(,>VI[JiV!/kr _wsҋ,SRj.F}w,emA Ğy>q`iåK,\4Fr0Ԧgй"bmPxXJ 28܄xn6k.2,n3-HQ2rO`z0/S~IJ۞>KI<]+}U.UA xRoQ Uz(/A3T&`Kf?}Y:Sc(o!|2w/ q|6,JUtR"c[-¿6Mp;^^>ˮ'G-._zٿJO[q1JԮftb.aTi?UKF܉{ohI O BJ-$M)3᥏yW9 J%~Yr!iJ+xb|GxY8jd u ﰾdQ&rysT.pCm}Z5*%3HI'x"kZVЩ Kbxyy-JpFodfS|0G}i*F!yv{ (r&oX%гX]pݻa~^GBΐċNn՜K-ٛ\gUO(T@'șƏoNN:# A|AĴj 6OnfZA/՞Vw,Wx3ɵ+srƋ-/ cZo z孧5l6Nm4V ܙ`7y&xDomΩE+ۄA/:b+Pޏ3& *uMIG1  㗖 X'x.ŏ{EV"kݛwTJt>yFb| WjҶ0֟*OmӬBP|s常nz|n]p-L5xNY!v0lj!v:≰)gb{pq&qz7OO<|f!.q39*i4s+PN{/xeC }S9TM ` |ʸ$ HlNL DJ(_Max V4ݱ(W(SbNH2:6=ﬖ!Mlò \[$jGMsǁ3y A^ㅅ kOi[ױLGٸHw>L.*GTY'gsI>Liͩ$ =N1ЃXtQc\%9gƟf6TИNeoeeoXEF I'_wmQns5j~MMXbћ  V1(7>#8)m`{gQk A@Fe_ RL t)$qRk4Vd9ue+݂d{#B5%]mI:PIu6sYP̩JWS\(was'٤0o= !C޾+$@ѲjLonވ>7 \L1_@?+#ܳyGtZ96y7`!Y /XĀ@Ț=@+l]SgAcyQ?V5_#~D ql=10.@;3 C⬇V{0AC3rMGwGj#^σkt5ecOR}\Cl̈́浮[!' CJeoqFx.V])`'7xht;&Skʭ*kL;Oz <lwWn"cӻ6t JP))|ר7u5xu6DjV~X-_J2l NjY e"~vX,U~z*)""J-;>$L ^9E h`bI ӑ_` ~:hzN^LL-62N(I~SH:AWU^\ ƎaC3Dg`F$&˥0g`KE2R4|>DIb۩OGBZհ"qode(rmOh'_|8UB <R=E ȞiDWqEB( ͆L\ޓmT#,(۬b+tGMJNSǥ:خ7>PRѴB6T0jdJT]BŁ-Mʈ-=v)(|n~  {E$a >th.>G҆v>\.|hA`Br L*Uxi ְ>cڷd&̶,'{AvרPi{wKs4Gn68(8VI ,`A|BNE)A '/kVCC BڒBw6ץ %x{b]Z2mi}nT=9Ə< nOGGX04f#?sL 1{a&E;"(.II4/u*똨uɉF&'} KmǦT8}tfv={q [9΂ir8ŶŐ @;.%Vs4dKh/6 0v|+1)ye'.q"RS3/1`CXg J3ʰ#o'fr_iq5C { TL>qױ9D.ԽH+ZQDYSEYs^:yv5BAF@1]+j;T̂+ `Wm"āGGB"v)ps6Ӎx!k?{:VZ7-S[ $!J`yQ1A[*V~{ád)Gy7|<SRrX: :w@1ö"s1{¤@Z⼿t'R-hTˑclT3}淩ߝG?1H|d.:/=G]ՌIdrN&Dje8} -QRxoY3 Y-|aQ j0 ODc3TK5n֞'FEO-ss\KEPG6/ߗ&i2Rǹctff(kZ6e7`i3Ik؁z&HmFV  -C̓no^Ӻl쥪_8neVLa.J5fV' !ұj]9I-*jB+ݽWsVЬxP@=4T&)J.]QUxtʤ&V< ڿw* ?ۥq j)S~>;,ҜA,F~ ;|8ާ|FKumcAd pگǽdGUJ%{bBsp#< gLЄK?`fso8P?W$$k4籫VV;^cC|DI&hYce\Bf|BNá12C$$QtoBcaBÐ 3$n2v4iiY6֭[?ְЮC-`Y7j **Q*qei{J{̼#ʏ*v!johב0qu=T t$#,0J0Cp\ jYMuZq\4duHq]6j.X 20\ m=,@YjK7ݯoD%.?uCH$(bM^Z1K}.۬_~Zf%g\Lw5\rc|OtZQ鲻0=\f*spI'6׶V6rR9zςJVf0jIqlUk(WJ0a׊*#B0uzY2_8Ի#M5Ylㆲ*V>Pi9\b%Ȼ$h: jw*]sD`ʔ(cZEϰɼ7O?d_ڐF_)zD!J|OUgegA̟;eȥ%6%{s6c!A, *Gy쿏)9#W)PT˝ $Bڌ*#E JRhHZ4EdnӊW2Uĭ87Zs}*w%m } Iw>ގ7E p+;DJAh%>X:9Hbq ȿ:eJG خ{e)bƮNab!g ,e<0gX<5X9FOMKv/wu9GZhǙ7gt4š/l;;ԃ)hX{\seE⟬tbڮ8,Zm7~u~7!# Ʃ滗\^dyJBX`P{C )b(wW2`b \: mIP0ş#M_HN3U:K7u2'7ob/`H/#ѳkxOOף2u4Hs};u\%`P3+eQs|yVOv"#&MA!t<6eT@0;Xb'SߝP眐 3w{1E:)PY~:jR*,J5;.7<.vA"ɺ= Y\߯݌;8q1^lg9 l1=-ßP::,qD(auqv ޼JE K ;]eee;#,KAEs!T |a#Qn'~ϑ@=oA`@;^z$ ?j5 o,4! &#} > |鑟5Jn 0Oԝ}͒t}PB32h1Hu bUcQEZE-ﶚ8׶q] ͜Vߩ!C\2R˪B<3˰۵ɵMcGqVJui(Ά m.Y7nipy˞èbh3b=\ܛX|\-TۈM[\ T7ּ."^3w8~W6yNJ̜5C`O9?6ђ떹 ?*H<erD20#fJ< G>qO_\A gߙٕ/L#sv"1%6V##;I3+6^J`m.j$&ɕg7b"n 01oarEu#2: Uj Xz3]ңB5b;Z5,)fa7` 纎nWil#\Ss P2* 'CJ=P%520޿ls7 2vA5QжyY|;+z])@˗g/ދu LZVl_hkWE_B>N (OJ9Q&gz' >tAO(*zbtE- ^I>R5>W'+dj׮-2sAXwҬ'//Z63u7 [ 3RFͣg}Ě+O2k}IywIVZOS x܌|oi$,~Iق\-эz]Ro#u~*/, _:<L EY9Ъ T' -~[5 4\ (Zy6s**!WCA4pRϢ=?Jv'N^wlzL*Rr8\ ٰĐ}2YUO}jQE Hɻ[i&v}l;/_T3bI?dFr˃j(F3RMwhu?~|ʈ0!QgBh1Wת[rTpVM@ȥsX YZ